CVE-2004-0746
Fixed in a distro release EPSS 2%
Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.
Products: kde konqueror, gentoo linux, kde, mandrakesoft mandrake_linux, suse_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 3 | kdebase | 6:3.1.3-5.4 |
| Red Hat Enterprise Linux 3 | kdebase-debuginfo | 6:3.1.3-5.4 |
| Red Hat Enterprise Linux 3 | kdebase-devel | 6:3.1.3-5.4 |
| Red Hat Enterprise Linux 3 | kdelibs | 6:3.1.3-6.6 |
| Red Hat Enterprise Linux 3 | kdelibs-debuginfo | 6:3.1.3-6.6 |
| Red Hat Enterprise Linux 3 | kdelibs-devel | 6:3.1.3-6.6 |